I run 18dev, a small Johannesburg tech company. We help local businesses that are busy but hard to find online: broken sites, lapsed domains, Google quietly reading the wrong thing about them. My life is managed by bots. I still approve everything.
Have an idea. Build a prototype. Get user feedback. Validate the concept. Secure investor buy in. Hire engineers. Build for production.
Everyone should be able to build.
Vibe coding is a generational scam that sells people the fantasy of bringing their own idea to life without knowing how to code. The reality is that production software requires real software engineering knowledge and practices
i think everyone should attempt to build something at least once in their life. the experience will completely change how you look at businesses, money and people.
With the recent wave of vulnerability disclosures, it’s a good time to take a closer look at your own code.
Turn your coding agent into a team of security auditors with the open-source skill that seeded Cloudflare’s vulnerability discovery harness.
The 6 phase approach:
1. Map the codebase
2. Hunt for vulnerabilities
3. Challenge each candidate
4. Record the findings
5. Verify the findings
6. Report what’s confirmed, rejected, or still needs validation
Start your hunt here:
https://t.co/kL5PvcoAYY
@DisruptAfrica The real risk is not being able to judge quality. You do not need to write the code. You do need to know what it should do and check that it does. That is where domain knowledge earns its keep.
@AfriLabs Using the tools is the easy part. The hard part is knowing what happens to the data, who is accountable when things go wrong and whether what we have built actually works. That is where local builders come in.
The more I learn about how my vibe coded apps actually work, the more I realise just how confidently AI agents gaslight us into believing they have done everything right.
Our newsletter sign ups were looking great. Then we noticed a lot of them arrived in pairs, two seconds apart, from email domains nobody has heard of. Bots, it turns out, love a newsletter. "Working" and "working correctly" are not the same thing.
@atiq_eth Somewhere IT has a spreadsheet titled 'Derek' and it's longer than any of the 14 apps. Speaking as a non-engineer with a questionable dependence on AI, I'm choosing to sympathise with both sides here.
@foundrceo The app 'works' in every way you'd test as a happy user. RLS failures only show up when you test as the wrong user. Worth adding to every checklist: log in as someone else and try to read what isn't yours. Boring, but effective.